$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: tHJqW5yW/zso4KAqdQIiOzB2XwJeZ4OOvUNn/4T5OQ8= Subject key identifier: ED:25:76:D1:A2:88:B5:21:DB:3F:03:AA:13:63:6E:DD:F8:70:30:B8 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019DA4F963CF67236FAA1C1355909568A880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 02D0 Signing time: Sun 19 Apr 2026 09:01:40 +0000 Manifest this update: Sun 19 Apr 2026 09:01:40 +0000 Manifest next update: Mon 20 Apr 2026 09:01:40 +0000 Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=) 2: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: 4rN7qNSPHGMLY8p3SAbAEtoTAClAD6kHbsvBFkPRjK0=) 3: IqdHlUJa3uvZPr2-m3v2S7HrJE0.roa (hash: 0dizv8L3FD2g5DMEu7DpHeZSiKDU38+rdYF5Csc3+Wk=) 4: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=) 5: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=) 6: WvlvNh7K5hLx9h9vacG0tkPjMmw.roa (hash: 2dl+awpNpd4g8TVURdJWX1OrrQJPPqOtOykXldkOySI=) 7: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=) 8: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=) 9: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=) 10: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=) 11: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=) 12: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:f9:63:cf:67:23:6f:aa:1c:13:55:90:95:68:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Apr 19 09:01:40 2026 GMT Not After : Apr 20 09:01:40 2026 GMT Subject: CN=ed2576d1a288b521db3f03aa13636eddf87030b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:c0:ef:66:10:3d:93:c1:f8:3f:9f:11:77: 81:53:2d:01:71:ac:1c:34:72:ac:a1:c6:2d:cb:4a: c4:e6:ed:56:52:40:20:cf:bd:3a:f7:95:4a:93:de: 3a:76:2f:19:b9:8d:08:ef:55:b5:c8:0e:84:58:c3: 0e:45:3c:7b:83:1b:ef:1b:fa:3d:8e:c8:c0:7e:0b: a7:c7:85:5f:aa:e0:ba:34:1d:e8:0d:02:8e:8d:f8: 5c:9f:49:dd:34:39:6b:c1:fb:7d:ac:23:c0:60:e2: 8d:5c:b6:f2:9b:11:1c:1f:bf:b9:c7:50:46:cb:1f: 27:1d:b1:4c:51:47:92:80:0b:57:e8:14:d0:00:f6: c2:c4:44:47:f6:4f:c4:78:a7:bf:e5:95:87:02:57: e9:5c:7c:33:63:1f:48:91:8b:10:f5:91:1f:d4:38: da:49:7e:65:f8:3d:08:94:85:3a:33:ae:48:39:95: 2f:6e:29:45:fa:e6:0d:f0:f9:70:4f:6a:6b:06:96: d5:dd:a6:60:7a:97:e3:b2:01:b7:ae:40:49:6e:94: eb:86:02:ac:94:fa:c5:9b:6a:33:06:1a:a4:e2:fb: b0:68:d8:97:5c:37:2e:2c:2f:c3:ef:3f:ec:03:f9: 85:67:f4:8f:89:4c:54:2c:70:0a:20:5a:4e:fa:3d: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:25:76:D1:A2:88:B5:21:DB:3F:03:AA:13:63:6E:DD:F8:70:30:B8 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6c:9b:29:b0:8d:72:53:2e:a1:0e:3b:0e:eb:69:c4:38:be: 16:41:81:5b:d9:61:af:9b:e2:60:7b:3a:c4:55:c9:f8:ca:3f: d7:cb:64:a1:60:29:fc:7e:74:48:83:ff:02:16:e5:a7:8b:a3: be:e9:21:42:7e:c9:36:0d:ff:09:da:9d:e3:52:b2:0a:b5:b7: 4f:19:ee:8e:6f:de:e5:2c:6e:32:9c:18:4e:f9:90:23:80:4b: 7e:f5:24:5f:7c:41:71:b3:a1:50:a3:b7:14:01:86:69:93:cf: 82:ec:3a:ab:3d:db:f7:e8:db:80:5e:3d:2c:55:44:ad:90:c2: cd:f3:d7:46:3c:48:97:61:39:8f:cc:1b:df:9e:db:3f:1b:cf: 4e:66:ab:3c:33:b7:6b:f8:2f:df:0b:73:61:77:11:6f:66:3e: 45:65:a1:b7:07:85:0b:6f:d9:94:9c:c0:ac:89:54:cf:2f:7e: 2e:0d:2e:4c:3e:d7:1f:1e:46:5c:8b:b2:07:a7:15:30:db:08: d2:d7:69:45:ec:83:26:11:fc:9c:2b:8d:90:71:35:cf:b3:89: 02:a1:f5:b5:65:76:89:61:74:c1:c7:bb:d7:18:3a:e2:0e:a1: 6e:7b:67:00:c0:b6:28:7c:21:0f:e3:0f:af:0d:00:27:fc:7b: 35:df:ea:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2k+WPPZyNvqhwTVZCVaKiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwNDE5MDkwMTQwWhcNMjYwNDIwMDkwMTQwWjAzMTEwLwYDVQQD EyhlZDI1NzZkMWEyODhiNTIxZGIzZjAzYWExMzYzNmVkZGY4NzAzMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZHA72YQPZPB+D+fEXeBUy0Bcawc NHKsocYty0rE5u1WUkAgz70695VKk946di8ZuY0I71W1yA6EWMMORTx7gxvvG/o9 jsjAfgunx4VfquC6NB3oDQKOjfhcn0ndNDlrwft9rCPAYOKNXLbymxEcH7+5x1BG yx8nHbFMUUeSgAtX6BTQAPbCxERH9k/EeKe/5ZWHAlfpXHwzYx9IkYsQ9ZEf1Dja SX5l+D0IlIU6M65IOZUvbilF+uYN8PlwT2prBpbV3aZgepfjsgG3rkBJbpTrhgKs lPrFm2ozBhqk4vuwaNiXXDcuLC/D7z/sA/mFZ/SPiUxULHAKIFpO+j1CXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0ldtGiiLUh2z8DqhNjbt34cDC4MB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGybKbCN clMuoQ47DutpxDi+FkGBW9lhr5viYHs6xFXJ+Mo/18tkoWAp/H50SIP/Ahblp4uj vukhQn7JNg3/Cdqd41KyCrW3Txnujm/e5SxuMpwYTvmQI4BLfvUkX3xBcbOhUKO3 FAGGaZPPguw6qz3b9+jbgF49LFVErZDCzfPXRjxIl2E5j8wb357bPxvPTmarPDO3 a/gv3wtzYXcRb2Y+RWWhtweFC2/ZlJzArIlUzy9+Lg0uTD7XHx5GXIuyB6cVMNsI 0tdpReyDJhH8nCuNkHE1z7OJAqH1tWV2iWF0wce71xg64g6hbntnAMC2KHwhD+MP rw0AJ/x7Nd/q1Q== -----END CERTIFICATE-----Generated at Sun Apr 19 12:58:31 2026 by rpki-client